Dumpster Diving has become Investigative Journalism 101
Studies have shown that physical, low tech access to personal records is the primary
source of information that Identity Thieves use to commit their crimes. The dumpster is also
the first place reporters look when trying to grab a quick headline.
(Source: Javelin Strategy and Research 2007 Identity Fraud Survey Report)
Companies can have their trade secrets stolen through “Dumpster Diving.” The Supreme Court has ruled that once an item is left for trash pickup, there is no expectation of privacy of continued ownership.
Legislation on the federal and and state level mandates the secure disposal of consumer data. Your organization must comply with laws and regulations, requiring that it protect certain information when it’s discarded.
An increasing number of laws actually require organizations to shred or face steep fines.
Disposing of Consumer Report Information - New Rule Tells How
The Gramm-Leach-Bliley Act (GLBA) of 1999 requires banking and financial institutions across the US to protect the confidentiality and security of consumer data.
The Health Insurance Portability and Accountability Act (HIPAA) of 1995 requires that
healthcare organizations across the US be responsible for the secure electronic transmission
of patient information and the secure storage and disposal of that information.
The Fair and Accurate Credit Transaction Act of 2003 (FACTA) added new sections to the federal Fair Credit Reporting Act, intended primarily to help consumers fight the growing crime of identity theft. Accuracy, privacy, limits on information sharing, and new consumer rights to disclosure are included in FACTA.
The Identity Theft Prevention Act effective January 1st 2006 is the most comprehensive and easy-to-use identity theft prevention law in New Jersey which gives consumers the tools they need to protect their financial well-being.
Whether your customers are consumers concerned about Identity Theft and Privacy, or companies concerned with protecting Trade information, you are entrusted with information that they consider to be extremely confidential.
In fact, whether you know it or not, you have an “Implied Contract” to protect that information simply based on the fact that you are collecting the data to conduct business.
They have the legal right to expect you to take every precaution to protect it, including shredding it before it is discarded.
Why Use A NAID Member?
As part of the only organization dedicated to increasing the security and ethics of the information destruction industry,
NAID Members are bound to a strict code of conduct. This is why NAID Members hold themselves to a Higher Standard.
Why Not Just Recycle It?
While NAID Members recycle everything they can after they destroy it, recycling alone does not establish the necessary requirements of information destruction such as:
How it was destroyed
Where it was destroyed
Who destroyed itWhen it was destroyed
Legal chain of custody
National Association for Information Destruction, Inc.
NAID® is the international trade association for companies providing information destruction services.